Data Protection Policy

This policy applies to:

• Users of TalkToDoc services

• Doctors, yoga practitioners, and healthcare professionals

• Employees and authorized personnel

It covers all personal, sensitive, and medical data processed by TalkToDoc.

a. Personal Data

• Name, contact details, age, gender

• Login credentials

b. Sensitive Personal Data

• Medical records and consultation history

• Health reports and prescriptions

• Lifestyle and wellness information

c. Technical Data

• IP address

• Device and browser information

• Log and access records

TalkToDoc processes data based on:

• User consent

• Medical necessity for consultation and care

• Legal and regulatory obligations under Indian law

• Data is stored on secure servers with restricted access.

• Medical records are retained only as long as required for:

- Healthcare delivery

- Legal and regulatory compliance

Data may be deleted upon user request, subject to applicable laws.

TalkToDoc uses multiple safeguards, including:

• Access control and authorization

• Secure login systems

• Encrypted communication where applicable

• Regular system monitoring and updates

Despite strong safeguards, no system is completely immune to cyber risks.

• Only authorized personnel and registered practitioners can access user data.

• Access is provided strictly on a need-to-know basis.

• All professionals are bound by confidentiality agreements.

User data is never sold or misused.

Data may be shared only:

• With assigned doctors or wellness professionals

• When required by law or court order

• To protect user safety or public health

Users have the right to:

• Access their personal data

• Request correction of inaccurate information

• Request deletion of data (subject to legal limits)

• Withdraw consent for non-essential data processing

Requests can be made through the contact details below.

In the event of a data breach:

• Immediate action will be taken to contain and assess the breach

• Affected users will be notified as required by law

• Preventive measures will be strengthened

Third-party tools (payment gateways, hosting services) used by TalkToDoc are required to comply with data protection and confidentiality standards.

• Data of minors is collected only with parental or guardian consent.

• Special care is taken to protect children's information.

TalkToDoc may revise this Data Protection Policy periodically. Updated versions will be published on our website.